CVE Vulnerability Catalog

Versions of TrueBooker <= 1.1.9 have an unauthenticated broken access control vulnerability that may allow attackers to access resources they should not have access to.

There is an unauthenticated remote code execution (RCE) vulnerability in Easy Invoice versions <= 2.1.19.

The Realtyna Organic IDX plugin versions up to 5.1.0 contains a vulnerability to unauthenticated SQL injection.

There is an unauthenticated SQL Injection vulnerability in WP Data Access versions <= 5.5.70.

The GD Rating System versions up to 3.6.2 are vulnerable to unauthenticated SQL injection.

WooCommerce versions up to 4.5.1 contain a vulnerability for unauthenticated SQL injection in the order delivery date field.

There is an unauthenticated SQL injection vulnerability in Funnel Builder by FunnelKit versions up to 3.15.0.1.

There is an unauthenticated SQL injection vulnerability in wpForo Forum versions up to 3.0.4.

GeekyBot versions up to 1.2.2 have a vulnerability allowing unauthenticated arbitrary file uploads.

There is an unauthenticated SQL Injection vulnerability in Contest Gallery versions up to 28.1.6.

In WP-BusinessDirectory versions <= 4.0.0, there is a vulnerability that allows subscribers to upload arbitrary files.

Versions of Datalogics Ecommerce Delivery up to 2.6.62 contain a vulnerability that allows unauthenticated privilege escalation.

There is an unauthenticated SQL injection vulnerability in SpeakOut! Email Petitions versions up to 4.6.5.

GeekyBot versions up to 1.2.0 are vulnerable to unauthenticated SQL injection, which may lead to unauthorized access to the database.

GeoDirectory versions up to 2.8.152 are vulnerable to unauthenticated SQL injection.

There is an unauthenticated SQL injection vulnerability in WP Photo Album Plus versions up to 9.1.08.001.

There is an unauthenticated SQL injection vulnerability in Form Maker by 10Web versions up to 1.15.38.

There is an unauthenticated SQL injection vulnerability in Simply Schedule Appointments versions up to 1.6.9.27.

There is an unauthenticated SQL injection vulnerability in WP Maps versions up to 4.9.1.

There is a remote code execution (RCE) vulnerability in Responsive Slider by MetaSlider versions up to 3.106.0. An attacker can exploit this flaw to execute arbitrary code on the server.